REMARKS 

Applicants 5 attorney wishes to express his appreciation to Examiner Maria Von Buhr 
for the courtesy of conducting a personal interview regarding this Application on Friday, 
March 7, 2003. 

As per the Examiner's request, Applicants have provided copies of the non-patent 
documents listed in Paper No. 13 (Applicants' information disclosure statement) for 
consideration in the next Office Action because the previously submitted copies have not 
matched with the file. 

Claims 1-95 are pending in the Office Action. Subsequent to receiving the Office 
Action, additional Claims 96-150 were copied under 37 C.F.R. §§ 1.604 and 1.607. Claims 
54, 64-66, 75-76, 79, 80, 83-85, 88-90, and 91-95 have been cancelled to put this Application 
into form for declaration of an interference. Therefore, Applicants reserve the right to later 
reinstate cancelled claims in this or related applications for purposes of interference. The 
Specification has been amended to correct typographical errors. No new matter has been 
added. The rejections of the claims are respectfully traversed in light of the amendments and 
following remarks, and reconsideration is requested. 
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Rejection Under 35 U.S.C. S 135 

Claim 54 is rejected under 35 U.S.C. § 135(b) as not being made prior to one year 
from the date on which the copied claim was actually patented. The Examiner states in part 
that "copied Claim [54] substantially appears as claim 1 in U.S. Patent No. 6,157,721 ["the 
'721 patent"] issued on December 5, 2000, from which U.S. Patent No. 6,292,569 derives its 



* * 



priority. 



55 



, Applicants traverse the Examiner's rejection, but Claim 54 has been cancelled (thus 
obviating the Examiner's rejection) to put this Application into form for declaration of an 
interference. Therefore, Applicants reserve the right to reinstate Claim 54 in this or related 
applications for purposes of interference. 

Applicants submit that Claim 54 is not for substantially the same subject matter as 
claim 1 of the 4 721 patent. Claim 54 does not include the limitation of a "second device class 
having at least one of tamper resistance and security level different from the at least one of 
tamper resistance and security level of the first device class," as recited in claim 1 of the '721 
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patent. Instead, Claim 54 recites the limitation of a "second device class having a tamper 
resistance and/or work factor substantially different from the tamper resistance and/or work 
factor of the first device class." 

Even if Claim 54 is considered substantially for the same subject matter as claim 1 of 
the '721 patent, Applicants submit that at least original Claims 1, 4, 10, 13, 16, 18-20, 27-29, 
36, and 38 of the present Application (which were made within one year of issuance of the 
'721 patent) are, alone or in combination, substantially for the same subject matter as claim 1 
of the '721 patent 

For at least these reasons, Applicants respectfully request withdrawal of the rejection 
under 35 U.S.C. § 135. 



Rejection Under 35 U.S.C. § 1 12, first paragraph 

Claims 88-90 are rejected under 35 U.S.C. § 1 12, first paragraph, as containing subject 
matter which was not describe in the specification in such a way as to enable one skilled in 
the art to which it pertains, or with which it is most nearly connected, to make and/or use the 
invention. The Examiner states in part that the instant specification provides no disclosure 
concerning any IEEE standards. 

Applicants traverse the Examiner's rejection, but Claims 88-90 have been cancelled 
(thus obviating the Examiner's rejection) to put this Application into form for declaration of 
an interference. Therefore, Applicants reserve the right to reinstate Claims 88-90 in this or 
related applications for purposes of interference. 
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Rejection Under 35 U.S.C. § 112, second paragraph 

Claims 66, 75, 84-85, and 91-94 are rejected under 35 U.S.C. § 1 12, second 
paragraph, as being indefinite in that it fails to point out what is included or excluded by the 
claim language. The Examiner states in part that these claims are omnibus type claims. 

Claims 64-65, 76, 79, 80, 83, and 95 are rejected under 35 U.S.C. § 112, second 
paragraph, as being indefinite for failing to particularly point out and distinctly claim the 
subject matter which applicants regard as the invention. The Examiner states in part that 



these claims appear to be omnibus type claims. 
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Applicants traverse the Examiner's rejection, but Claims 64-66, 75-76, 79, 80, 83-85, 
and 91-95 have been cancelled (thus obviating the Examiner's rejection) to put this 
Application into form for declaration of an interference. Therefore, Applicants reserve the 
right to reinstate Claims 64-66, 75-76, 79, 80, 83-85, and 91-95 in this or related applications 
for purposes of interference. 

For at least these reasons, Applicants respectfully request withdrawal of the rejections 
under 35 U.S.C. § 112. 



Rejection Under 35 U.S.C. $ 102 

Claims 1-53 and 55-95 are rejected under 35 U.S.C. § 102(b) as being clearly 
anticipated by the Sibert et al. article, entitled "DigiBox; A Self-Protecting Container for 
Information Commerce," published in July 1995. 

Applicants submit that a claim to foreign priority has been perfected under 35 U.S.C. § 
119 with the certified translation of the priority document (Swedish Application No. 9500355- 
4, filed in Sweden on February 1, 1995) that was filed in grandparent Application No. 
08/594,811, now U.S. Patent No. 5,845,281. 

Accordingly, Applicants have overcome the date of the Sibert et al. article and the 
reference should be effectively removed as prior art. For at least these reasons, Applicants 
respectfully request withdrawal of the rejections under 35 U.S.C. § 102. 
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Allowable Claims 



As per the interview, Applicants thank the Examiner for the indication that copied 
Claims 55-63, 67-74, 77-78, 81-82, and 86-87 are allowable and patentable to Applicant 
subject to a judgement in an interference. 
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CONCLUSION 

For the above reasons, Applicants believe pending Claims 1-53, 55-63, 67-74, 77-78, 
81-82, and 86-87 are now in condition for allowance and Applicants request that an 
interference be declared for the subject matter of the allowable copied claims. If the 
Examiner has any questions or concerns, the Examiner is hereby requested to telephone 
Applicants' Attorney at (949) 752-7040. 



I hereby certify that this correspondence is being deposited with 
the U.S. Postal Service as First Class Mail in an envelope 
addressed to: Commissioner for Patents, Washington, D.C 20231, 
>ril 30. 2003. 



April 30, 2003 



Sandy Kim 



Respectfully submitted, 



David S. Park 

Attorney for Applicants) 

Reg. No. 52,094 
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ATTACHMENT A 



Please amend the paragraph on page 1, starting on line 8, as follows. 

This application is a continuation of U.S. Patent Application No. 09/164,606 filed 
October 1, 1998, which in turn claimed priority to U.S. Patent Application No. 08/594,81 1, 
filed on January 31, 1996, which in turn claimed priority to the Swedish Application No. 
[950036-4] 9500355-4 , filed on February 1, 1995. 



Please amend the paragraph starting on page 7, line 23, as follows. 

The author also determines the conditions 42 for the usage of the data object 24 by a 
user. The data object 24 and the usage conditions 42 are input to a data packaging program 
19, which creates a secure data package 40 of the data object and of control data which are 
based on the input usage conditions 42. Once packaged in this way, the data object can only 
be accessed by a user program [6] 35. 



Please amend the paragraph starting on page 8, line 9, as follows. 

The above-mentioned data packaging can be carried out by the author himself by 
means of the data packaging program 19. As an alternative, the author may send his data 
object to a broker, who inputs the data object and the usage conditions determined by the 
author to the data packaging program 19 in order to create a secure package [3] 40. The 
author may also sell his data object to the broker. In that case, the broker probably wants to 
apply his own usage conditions to the data packaging program. The author may also provide 
the data object in a secure package to the broker, who repackages the data object and adds 
further control data which is relevant to his business activities. Various combinations of the 
above alternatives are also conceivable. 



Please amend the paragraph starting on page 8, line 18, as follows. 

In the user part 2 of the flow diagram, the secure package 40 is received by a user, 
who must use the user program [6] 35 in order to unpackage the secure package 40 and obtain 
the data object in a final form 80 for usage. After usage, the data object is repackaged into the 
secure package 40. 
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Please amend the paragraph on page 9, starting on line 15, as follows. 

As shown in FIGURE 3, it comprises a program control module [11] 301, a user 
interface module [12] 302 , a packaging module [13] 303 , a control data creation module [14] 
304 , an encryption module [15] 305 , one or more format modules [16] 306 , and one or more 
security modules [17] 307 . 



Please amend the paragraph on page 9, starting on line 19, as follows. 

The control module [11] 301 controls the execution of the other modules. The user 
interface module [12] 302 handles interaction with the data object provider. The packaging 
module [13] 303 packages the control data and the data object. It uses the control data 
creation module [14] 304 , the format modules [16] 306 , the security modules [17] 307 and the 
encryption module [15] 305 as will be described more in detail below. 



Please amend the paragraph on page 9, starting on line 24, as follows. 

The format modules [16] 306 comprise program code, which is required to handle the 
data objects in their native format. They can fulfill functions such as data compression and 
data conversion. They can be implemented by any appropriate, commercially available 
program, such as by means of a routine from the PKWARE Inc. Data Compression Library 
for Windows and the Image Alchemy package from Handmade Software Incorporated, 
respectively. They can also be implemented by custom designed programs. 
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Please amend the paragraph starting on page 1 0, line 1 , as follows. 

The security modules [17] 307 comprise program code required to implement security, 
such as more sophisticated encryption than what is provided by the encryption module [15] 
305 , authorization algorithms, access control and usage control, above and beyond the basic 
security inherent in the data package. 



Please amend the paragraph starting on page 10, line 5, as follows. 

The data packaging program 19 can contain many different types of both format and 
security modules. The program control module [11.] 301 applies the format and security 
modules which are requested by the data provider. 
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Please amend the paragraph starting on page 10, line 8, as follows. 

The encryption module [15] 305 may be any appropriate, commercially available 
module, such as "FileCrypt" Visual Basic subprogram found in Crescent Software's 
QuickPak Professional for Windows—FILECRPT.BAS, or a custom designed encryption 
program. 

Please amend the paragraph starting on page 10, line 12, as follows. 

The control data creation module [14] 304 creates the control data for controlling the 
usage of the data object. An example of a control data structure will be described more in 
detail below. 

Please amend the paragraph starting on page 10, line 17, as follows. 

The control data can be stored in a header file and a usage data file. In a preferred 
embodiment, the header file comprises fields to store an object identifier, which uniquely 
identifies the control data and/or its associated data object, a title, a format code, and a 
security code. The format code may represent the format or position of fields in the usage 
data file. Alternatively, the format code may designate one or more format modules to be 
used by the data packaging program or the user program. The security code may represent the 
encryption method used by the encryption module [15] 305 or any security module to be used 
by the data packaging program and the user program. The header file fields will be referred 
to as header elements. 



Please amend the paragraph starting on page 11, line 1, as follows. 

The header elements and the usage elements are control elements which control all 
operations relating to the usage of the object. The number of control elements is unlimited. 
The data provider may define any number of control elements to represent his predetermined 
conditions of usage of the data object. The only restriction is that the data packaging program 
1 9 and the user program [6] 35 must have compatible program code to handle all the control 
elements. This program code resides in the packaging module and the usage manager 
module, to be described below. 
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Please amend the paragraph starting on page 1 1, line 8, as follows. 

Control elements can contain data, script or program code which is executed by the 
user program [6] 35 to control usage of the related data object. Script and program code can 
contain conditional statements and the like which are processed with the relevant object and 
system parameters on the user's data processor. It would also be possible to use a control 
element to specify a specific proprietary user program which can only be obtained from a 
particular broker. 



Please amend the paragraph on page 11, starting on line 25, as follows. 

First a data provider creates a data object and saves it to a file, step 401. When the 
data packaging program is started, step 402, the user interface module [12] 302 prompts the 
data object provider to input, step 403, the header information consisting of e.g. an object 
identifier, a title of the data object, a format code specifying any format module to be used for 
converting the format of the data object, and a security code specifying any security module 
to be used for adding further security to the data object. Furthermore, the user interface 
module [12] 302 prompts the data object provider to input usage information, e.g. his 
conditions for the usage of the data object. The usage information may comprise the kind of 
user who is authorized to use the data object, the price for different usages of the object etc. 
The header information and the usage information, which may be entered in the form of 
predetermined codes, is then passed to the control module [11] 301, which calls the packaging 
module [13] 303 and passes the information to it. 



Please amend the paragraph on page 12, starting on line 7, as follows. 

The packaging module [13] 303 calls the control data creation module [14] 304 which 
first creates a header file, then creates header data on the basis of the header information 
entered by the data object provider and finally stores the header data, step 404-405. Then a 
usage data file is created, usage data created on the basis of the usage information entered by 
the data provider, and finally the usage data is stored in the usage data file, step 406-407. 



Please amend the paragraph on page 12, starting on line 13, as follows. 
The packaging module [13] 303 then applies any format and security modules [16, 17] 
306, 307 specified in the header file, steps 408-413, to the data object. 
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Please amend the paragraph on page 12, starting on line 15, as follows. 

Next, the packaging module [13] 303 concatenates the usage data file and the data 
object and stores the result as a temporary file, step 414. The packaging module [13] 303 
calls the encryption module [15] 305 , which encrypts the temporary file, step 415. The level 
of security will depend somewhat on the quality of the encryption and key methods used. 



Please amend the paragraph on page 12, starting on line 19, as follows. 

Finally, the packaging module [13] 303 concatenates the header file and the encrypted 
temporary file and saves the result as a single file, step 416. This final file is the data package 
which may now be distributed by file transfer over a network, or on storage media such as 
CDROM or diskette, or by some other means. 



Please amend the paragraph on page 13, starting on line 3, as follows. 

The artist uses some image creation application, such as Adobe's Photoshop to create 
his image. The artist then saves the image to file in an appropriate format for distribution, 
such as the Graphical Interchange Format (GIF). The artist then starts his data packaging 
program and enters an object identifier, a title, a format code and a security code, which in 
this example are "123166789", "image", "a", and "b", respectively. In this example, the 
format code "a" indicates that no format code need be applied, and this code is selected since 
the GIF format is appropriate and already compressed. Furthermore, the security code "b" 
indicates that no security module need be applied and this code is selected since the security 
achieved by the encryption performed by means of the encryption module [15] 305 is 
considered appropriate by the artist. 



Please amend the paragraph on page 13, starting on line 13, as follows. 

Then the artist enters his dial-up phone number, his price for a single use of the image 
and for unlimited use of the data object, a code for usage types approved, and for number of 
usages approved. For this purpose, the user interface module [12] 302 may display a data 
entry form. 
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Please amend the paragraph starting on page 15, line 28, as follows. 
The user set of control data 60, i.e. a set of control data which is adapted to the 
specific user of this example, is created in steps 1001-1003 of FIGURE [11] 10. First, the 
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general set of control data 50 stored in the control database is copied to create new control 
data, step 1001. Second, a new identifier, here "123166790", which uniquely identifies the 
user set of control data, is stored in the identifier field of the new control data 60, step 1002. 
Third, the data field of the second usage element is updated with the usage purchased, i.e. in 
this example with two, since two viewings of the video were purchased, step 1003. 

Please amend the paragraph starting on page 16, line 7, as follows. 

The user set of control data is stored in the control database 20, step 1004. Then, the 
video, which is stored in the bulk storage 17, is copied, step 1005. The copy of the video is 
concatenated with the user set of control data, step 1006. The security code 0010 specifies 
that the entire data package 40 is to be encrypted and that the user program [6] 35 must 
contain a key which can be applied. Accordingly, the whole data package is encrypted, step 
1007. Finally, the encrypted data package is stored on a storage media or passed to a network 
program, step 1008, for further transfer to the user. 

Please amend the paragraph starting on page 1 7, line 2, as follows. 

The user's data processor, which is shown in Figure 13, is a general or special purpose 
processor, preferably with network capabilities. It comprises a CPU 25, a memory 26, and a 
network adapter 27, which are interconnected by a bus 28. As shown in FIGURE 13, other 
conventional means, such as a display 29, a keyboard [1] 30, a printer 31, a sound system 32, 
a ROM 33, and a bulk storage device 34, may also be connected to the bus 28. The memory 
26 stores network and telecommunications programs [8] 37 and an operating system (OS) [9] 
39 . All the above-mentioned elements are well-known to the skilled person and commercially 
available. For the purpose of the present invention, the memory 26 also stores a user program 
[6] 35 and, preferably, a database 36 intended for the control data. Depending upon the 
current operation, a data package 40 can be stored in the memory 26, as shown, or in the bulk 
storage 34. 
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Please amend the paragraph starting on page 17, line 15, as follows. 
The user program [6] 35 controls the usage of a data object in accordance with the 
control data, which is included in the data package together with the data object. 
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Please amend the paragraph starting on page 17, line 17, as follows. 

As shown in Figure 14, the user program [6] 35 comprises a program control module 
140^ a user interface module 1402, a usage manager module 1403, a control data parser 
module 1404, a decryption module 1405, one or more format modules 1406, one or more 
security modules 1407, and a file transfer program 1409. 



Please amend the paragraph starting on page 17, line 30, as follows. 

The user program [6] 35 can contain many different types of both format and security 
modules. However, they should be complementary with the format and security modules 
used in the corresponding data packaging program. The usage manager module 1401 applies 
the format and security modules which are necessary to use a data object and which are 
specified in its control data. If the proper format and security modules are not available for a 
particular data object, the usage manager module 1401 will not permit any usage. 

Please amend the paragraph starting on page 18, line 1 1, as follows. 
The control data parser module 1403 performs the reverse process of the control data 
creation module [14] 304 in FIGURE 3. 
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Please amend the paragraph starting on page 18, line 13, as follows. 

The user program [6] 35 can have code which controls use of the program by 
password or by any other suitable method. A password may be added in a password control 
element during packaging of the data object. The password is transferred to the user by 
registered mail or in any other appropriate way. In response to the presence of the password 
control element in the control data structure, the user program prompts the user to input the 
password. The input password is compared with the password in the control data, and if they 
match, the user program continues, otherwise it is disabled. 



Please amend the paragraph starting on page 18, line 20, as follows. 

The user program [6] 35 can also have procedures which alter the behavior of the 
program (e.g. provide filters for children) according to the control data of the user object 41. 
It is important to mention that the user program [6] 35 never stores the object in native format 
in user accessible storage and that during display of the data object the print screen key is 



trapped. 
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Please amend the paragraph starting on page 19, line 2, as follows. 
The operation of an embodiment of the user program [6] 35 will now be described 
with reference to the block diagram of FIGURE 14 and the flow diagram of FIGURE 15. 



Please amend the paragraph on pages 19 and 20, starting on line 26, as follows. 

Then the usage manager module 1403 calls the decryption module 1405, which 
decrypts the object data, step 1515, whereafter the requested usage is enabled, step 1516. In 
connection with the enabling of the usage, the control data may need to be updated, step 1517. 
The control data may for instance comprise a data field indicating a limited number of usages. 
If so, this data field is decremented by one in response to the enabling of the usage. When the 
user has finished usage of the data object, the user program [6] 35 restores the data package in 
the secure form by repackaging it, step 1518. More particularly, the data object and the usage 
elements are reconcatenated and reencrypted. Then the header elements are added and the 
thus-created package is stored in the user's data processor. 



Please amend the paragraph starting on page 20, line 9, as follows. 
Assume that a user has found the image at an electronic bulletin board (BBS) and is 
interested in using it. He then loads the data package 40 containing the image to his data 
processor and stores it as a file in the bulk storage. The user then executes the user program 
[6] 35 and requests to preview the image. The user program then performs steps 1505-1507 
of the flow diagram in FIGURE 15. The request for a preview of the image is compared with 
the data field of the usage element "code for usage type approved". In this example, the code 
"9" designates that previews are permitted. Thus, the requested preview is OK. Then, the 



user program [6] 35 performs step 1509-1515 of FIGURE 15. Since the format code "a" and 
the security code "b" of the header data indicate that neither conversion, nor decompression, 
nor security treatment is required, the user program only decrypts the object data. The usage 
manager module 1403 then displays the preview on the user's data processor and passes 
control back to the user interface 1402. 
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Please amend the paragraph starting on page 21, line 18, as follows. 
If the data object provider wants to improve the security of a data package containing 
a data object, a security module [17] 307 containing a sophisticated encryption algorithm, 
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such as RSA 5 could be used. In that case the packaging module [13] 303 calls the security 
module [17] 307 in step 412 of the flow diagram of FIGURE 4. The security module encrypts 
the image and passes a security algorithm code to the control data creation module [12] 304 , 
which adds a control element for the security module code, which will be detected by the user 
program [6] 35. Then the data packaging continues with step 414. When the data package is 
sent to the user, the public key is mailed to the user by registered mail. When the user 
program is executed in response to a request for usage of this data object, the usage manager 
module will detect the security module code in the control data and call the security module. 
This module passes control to the user interface module 1402, which requests the user to input 
the public key. If the key is correct, the user security module applies complementary 
decryption using that key and passes a usage approved message to the usage manager module, 
which enables the usage. 



Please amend the paragraph starting on page 22, line 1, as follows. 

As another example of improved security, a security module may implement an 
authorization process, according to which each usage of the data object requires a dialup to 
the data processor of the data object provider. When the corresponding security module code 
is detected by the user program [6] 35, the relevant security module is called. This module 
passes a request for authorization to the control module 1401, which calls the file transfer 
program 1409, which dial the data object provider's dial-up number, which is indicated in a 
usage element and transfers the request for authorization of usage. Upon a granted 
authorization, the data provider's data processor returns a usage approved message to the user 
security module, which forwards the approval to the usage control module, which enables one 
usage. If the user requests further usages of the data object, the authorization process is 
repeated. This procedure results in a permanent data object security. 



Please amend the paragraph starting on page 22, line 14, as follows. 

A further specific example of how the user program [6] 35 operates will now be 
described with reference to FIGURE 16. The example is a continuation of Example 2 above, 
where a user purchased two viewings of a video film from a broker. 
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Please amend the paragraph starting on page 22, line 17, as follows. 

The user wants to play the video which was purchased and transferred from the 
broker. The user applies the user program [6] 35, step 1601, and requests to play the video, 
step 1602. The user program [6] 35 step 1601, and requests to play the video, step 1602. The 
user program [6] 35 first examines the user set of control data 60, step 1603. In this example, 
the user program [6] 35 contains only those format and security modules for objects with 
format code of 0010 and with a security code of 0010. Consequently, only those types of data 
objects may be used. If the program encounters other codes it will not enable the usage 
action, step 1604-1605. 



Please amend the paragraph on pages 22 and 23, starting on line 24, as follows. 

Next, the user program [6] 35 compares the first control element data which is 1 , for 
the educational users only, to user information entered by the user on request of the user 
program. Since the user type entered by the user is the same as that indicated in the first 
usage element the process continues, steps 1606-1607. Then the user program checks the 
second control element data which specifies that the number of plays purchased is 2. 
Consequently, the usage is enabled, step 1609. The user program applies the decryption 
module with the universal key and the AVI format video is displayed on the display unit 29. 
Then, the second control element data is decremented by one, step 1610. Finally, the video is 
repackaged, step 161 1. Proceeding to a state 1699, the user program returns to its initial state 
to process further requests from the user. 



Please amend the paragraph starting on page 23, line 4, as follows. 

Object control is achieved through the interaction of the data packaging program 19 
and the usage program [6] 35 with the control data. Variation of object control can be applied 
to a particular object by creating a control data format with control elements defining the 
control variation and the circumstances in which the variation is applied. Program procedures 
should then be added to program modules to process the control elements. For example, 
suppose a broker wants to allow students to print a particular article for free but require 
business users to pay for it. He defines control elements to represent the user types student 
and business and the associated costs for each. He then adds program logic to examine the 
user type and calculate costs accordingly. Object control is extensible in the sense that the 
control data format can have as many elements as there are parameters defining the rules for 
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object control. 

Please amend the paragraph on pages 23 and 24, starting on line 17, as follows. 

Object security is also achieved through the interaction of the data packaging program 
19 and the user program [6] 35 with the control data. Security process and 
encryption/decryption algorithms can be added as program modules. Variation of object 
security can be applied to a particular object by creating a control data format with control 
elements defining the security variation and the circumstances in which the variation is 
applied. Program procedures should be added to program modules to process the control 
elements. For example, suppose a broker wants to apply minimal security to his collection of 
current news articles but to apply tight security to his encyclopedia and text books. He 
defines a control element for security type. He then adds program logic to apply the security 
algorithms accordingly. Object security is extensible in the sense that multiple levels of 
security can be applied. The level of security will of course be dependent on the 
encryption/key method which is implemented in the security modules. One level of security 
may be to require on-line confirmation when loading a data object to the user's data 
processor. This can be implemented in program code in a security module. This permits the 
broker to check that the object has not already been loaded as well as double check all other 
parameters. 
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